All CVEs — page 282 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Chrome's accessibility feature had incorrect authorization checks that allowed a compromised renderer process to bypass site isolation and gain access to other origins. This creates a path for attackers to escape from sandboxed pages and access data from different websites.
This flaw involves an out-of-bounds write vulnerability in Google Chrome prior to version 155.0.8059.39, allowing a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
A use-after-free vulnerability in Google Chrome's Storage component allows remote attackers who have already compromised the renderer process to execute arbitrary code outside the sandbox. This represents a critical escalation path from renderer compromise to full system compromise.
This flaw allows a remote attacker to obtain sensitive information via social engineering, leveraging a crafted HTML page on an affected version of Google Chrome for iOS.
A use-after-free vulnerability in the Media component of Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox by loading a crafted HTML page.
This flaw involves a use after free vulnerability in Chromecast, allowing a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. This is a critical issue as it can lead to full system compromise.